Feat(debian/named): Insert IP address

Insert the default IP address into `named.conf.options`.

diff --git a/playbooks/roles/debian/named/tasks/main.yml b/playbooks/roles/debian/named/tasks/main.yml
index fa5698b87f865d642c305e4aa5466fcb125e182e..9bc3d0089dd71ff8d42cbbd427793d1f0e186c90 100644 (file)
--- a/playbooks/roles/debian/named/tasks/main.yml
+++ b/playbooks/roles/debian/named/tasks/main.yml
@@ -22,7 +22,7 @@
 
     - name: Configure BIND
       become: true
-      copy:
+      template:
         src: named.conf.options
         dest: /etc/bind/named.conf.options
         owner: bind

diff --git a/playbooks/roles/debian/named/files/named.conf.options b/playbooks/roles/debian/named/templates/named.conf.options
similarity index 82%
rename from playbooks/roles/debian/named/files/named.conf.options
rename to playbooks/roles/debian/named/templates/named.conf.options
index 69409260359b9442908f3df0c5d21dfa52f0519d..37f8735a8a48d8f1f237b39268c8effdb19353d9 100644 (file)
--- a/playbooks/roles/debian/named/files/named.conf.options
+++ b/playbooks/roles/debian/named/templates/named.conf.options
@@ -26,6 +26,6 @@ options {
        // listen-on-v6 { any; };
 
        // allow-transfer { trusted; };
-       allow-query { localhost; 192.168.0.0/16; 10.0.0.0/8; };
-       allow-recursion { localhost; 192.168.0.0/16; 10.0.0.0/8; };
+       allow-query { localhost; {{ ansible_facts.default_ipv4.address }}/32; 192.168.0.0/16; 10.0.0.0/8; };
+       allow-recursion { localhost; {{ ansible_facts.default_ipv4.address }}/32; 192.168.0.0/16; 10.0.0.0/8; };
 };